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DETAILED ACTION 

This Office Action is in response to Request for Continuation Examination (RCE) filed 
December 29, 2008. Claims 1-3 have been cancelled as requested by Applicant. 
Claims 4-18 are presented for further examination. Claim 19 is newly added. 

Election/Restrictions 

1 . Newly submitted claim 19 directed to an invention that is independent or distinct 
from the invention originally claimed for the following reasons: Inventions I and II are 
related as mutually exclusive species in an intermediate-final product relationship 

Since applicant has received an action on the merits for the originally presented 
invention, this invention has been constructively elected by original presentation for 
prosecution on the merits. Accordingly, claim 19 withdrawn from consideration as being 
directed to a non-elected invention. See 37 CFR 1 .142(b) and MPEP § 821 .03. 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 
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3. Claims 4-18 are rejected under 35 U.S.C. 102(e) as being anticipated by Araujo 
et al. (hereinafter "Ara", US Patent Publication 2003/0191799 A1). 

As per claim 4, Ara discloses a system to provide remote computing client access to 
resources provided by at least one server in at least one target computing network, 
comprising: 

a point-of-presence node configured to connect to the at least one target computing 
network (paragraphs [0029-0030, 0060-0061], Ara teaches a Virtual Office Server 
(point-of-presence node) connected to a LAN (target computing network); 

at least one Internet Protocol Security concentrator resident in the point of presence 
node (paragraphs [0060-0061 , 0063, 0069], Ara teaches the Virtual Office Server 
having an SSL and firewall/router for providing secure, remote, web-based access); 

at least one access server resident in the point of presence node, wherein the at least 
one access server comprises a virtual private network module configured to implement 
a secure communication channel between the remote computing client and the at least 
one server in the at least one target communication network (paragraphs [0009, 0027, 
0057, 0060-0061], Ara teaches a Virtual Office Server providing the user with a "virtual 
office". The user is provided a secure, remote connection to various office processing 
applications. The user must provide username and password to logon to virtual office 
capability). 
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As per claim 5, Ara discloses the system of claim 4, wherein the remote computing 
client comprises a virtual private network module configured to cooperate with the 
virtual private network module resident in the point of presence node (paragraphs 
[0059, 0064, 0088]). 

As per claim 6, Ara discloses the system of claim 5, wherein: 

the virtual private network module in the remote computing client communicates with 
the virtual private network module in the at least one access server using a message 
exchange mode (paragraphs [0088-0089]); 

the virtual private network module in the remote computing client receives application 
layer data from at least one application executing on the remote computing client 
(paragraphs [0089, 0096]). 

As per claim 7, Ara discloses the system of claim 6, wherein the virtual private network 
module in the at least one access server is configured to implement a proxy client for at 
least one application executing on the remote computing device (paragraphs [0061, 
0063, 0100]). 
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As per claim 8, Ara discloses the system of claim 5, wherein the virtual private network 
module in the remote computing client and the virtual private module in the at least one 
access server configured to establish an encrypted communication channel between a 
specific application executing on the remote computing client and the point of presence 
node (paragraphs [0063-0064]). 

As per claim 9, Ara discloses the system of claim 8, wherein the virtual private network 
module in the remote computing client: 

generates a first encryption data set comprising a public portion and a private portion 
(paragraphs [0025, 0069, 0077]); 

transmits the public portion of the first encryption data set to the virtual private network 
module in a session set-up message (paragraphs [0025, 0069, 0077]). 

As per claim 10, Ara discloses the system of claim 5, wherein the remote computing 
device further comprises a reconfiguration system module configured to collect system 
configuration data relating to the remote computing device, generates a system 
configuration file, and stores the system configuration file in a memory module in the 
remote computing device (paragraphs [0063, 0069]). 
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As per claim 1 1 , Ara discloses the system of claim 10, wherein the at least one access 
server comprises: 

a central policy manager module that configured to establishe configuration policies for 
one or more remote clients that access resources via the virtual private network module 
(paragraphs [0063, 0069]); 

a reconfiguration system module configured to cooperate with the reconfiguration 
system module in the remote computing device to impose configuration changes on the 
remote computing device (paragraphs [0069]). 

As per claim 12, Ara discloses the system of claim 10, wherein the reconfiguration 
system configured to implement an atomic reconfiguration process on the remote 
computing device (paragraph [0085]). 

As per claim 13, Ara discloses the system of claim 5, wherein the remote computing 
device comprises a local proxy module that emulates an HTTP proxy server 
(paragraphs [0129, 0134]). 

As per claim 14, Ara discloses the system of claim 10, wherein the remote computing 
device comprises a client application tunneling module, wherein the client application 
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tunneling module configured to extract destination IP addresses and port numbers from 
communication packets and invokes the reconfiguration system module to reconfigure a 
name-to-address mapping for communications between the remote computing device 
and an application executing on a remote server (paragraphs [0076-0077]). 

As per claim 1 5, Ara discloses the system of claim 5, wherein at least one server in the 
point of presence node further comprises a network address translation module 
configured to perform network address translation on incoming and outgoing packets to 
enable remote access to resources on one or more networks outside the target 
computing network (paragraphs [0030, 0066, 0072]). 

As per claim 16, Ara discloses the system of claim 15, wherein the network address 
translation module is configured to automatically determine a network configuration for 
the at least one target computing network (paragraphs [0072, 0076]). 

As per claim 17, Ara discloses the system of claim 5, wherein: 

the at least one access server comprises a first network backup module (paragraph 
[0073]); 
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the remote computing device comprises a second network backup module (paragraph 
[0093]); 

the first network backup module and the second network backup module configured to 
cooperate to back up and restore one or more files from the remote at least one access 
server (paragraphs [0093, 0097]). 



As per claim 18, Ara discloses the system of claim 17, wherein the first network backup 
module configured to maintain incremental backups of files used by the remote 
computing client (paragraph [0073]). 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BARBARA N. BURGESS whose telephone number is 
(571)272-3996. The examiner can normally be reached on M-F (8:00am-4:00pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ario Etienne can be reached on (571 ) 272-4001 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Barbara N Burgess/ Barbara N Burgess 

Examiner, Art Unit 2457 Examiner 

Art Unit 2457 

/ARIO ETIENNE/ 

Supervisory Patent Examiner, Art Unit 2457 



